Real-time scanning for unknown files are currently done by APEX.If you enable ClamAV (by default it is disabled), ClamAV also support real-time scanning for unknown files.There is also an option to purchase Avira as an add-on, which also can do real-time scanning for unknown files.